Signal Confirms Sophisticated Phishing Scheme Caused Account Compromises

Signal confirmed active targeted phishing campaigns that use sophisticated social-engineering — including impersonation of trusted contacts and a fake “Signal Support Bot” — to trick victims into revealing SMS verification codes and their Signal PINs, allowing attackers to register victims’ numbers on attacker-controlled devices and take over accounts of high-profile individuals; Signal states its infrastructure and end-to-end encryption remain uncompromised and recommends vigilance and proactive account protections.